Should I block it?
No, this file is 100% safe to run.
Additional versions
(Note, the developer publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
tor.exe
| MD5: | 83f5d4f29a9ac0430dc19d8a0c7d977f |
| SHA1: | 0290e245b1e0e1479624a82bce26ab49d3209461 |
| SHA256: | 955a9696686629a48d38d291aebfd722edbbd181b064d01899cd3189150bd186 |
Overview
tor.exe runs as a service under the name Tor Win32 Service (tor) within the local user context.
Details
| File name: | tor.exe |
| Typical file path: | C:\Program Files\vidalia bundle\tor\tor.exe |
| Size: | 2.75 MB (2,886,442 bytes) |
| Digital DNA |
| PE subsystem: | Windows Console |
| File packed: | No |
| Code language: | Microsoft Visual C++ |
| .NET CLR: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'tor' (Tor Win32 Service)
- tor
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.05912766% | |
| Kernel CPU: | 0.04151810% | |
| User CPU: | 0.01760956% | |
| Kernel CPU time: | 1,981 ms/min | |
| Context switches: | 93/sec | |
| Memory |
| Private memory: | 15.71 MB | |
| Private (maximum): | 22.15 MB | |
| Private (minimum): | 19.97 MB | |
| Non-paged memory: | 15.71 MB | |
| Virtual memory: | 83.54 MB | |
| Virtual memory (peak): | 89.54 MB | |
| Working set: | 22.16 MB | |
| Working set (peak): | 22.31 MB | |
| Resource allocations |
| Threads: | 4 | |
| Handles: | 162 | |
| GUI GDI count: | 9 | |
| GUI GDI peak: | 9 | |
| GUI USER count: | 1 | |
| GUI USER peak: | 2 | |
Process properties
| Integrety level: | High |
| Platform: | 32-bit |
| Command line: | "C:\users\farzad\tor browser\app\.\tor.exe" -f "C:/users/farzad/tor browser/app/..\data\tor\torrc" datadirectory "C:/users/farzad/tor browser/data/tor" controlport 9051 __owningcontrollerprocess 3140 hashedcontrolpassword 16:1ea5411b3d7cbdfb6088f9d2f01b22c05ac1c9b11b0e794eb072f8929a |
| Owner: | User |
| Windows Service |
| Service name: | tor |
| Display name: | Tor Win32 Service |
| Description: | “Provides an anonymous Internet communication system” |
| Type: | Win32OwnProcess |
| Parent process: | vidalia.exe (Vidalia by vidalia-project.net) |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
42.86% |
|
| Windows 7 Home Premium |
28.57% |
|
| Windows 8.1 Pro |
7.14% |
|
| Microsoft Windows XP |
7.14% |
|
| Windows 7 Professional |
7.14% |
|
| Windows Server 2012 Standard Evaluation |
7.14% |
|
Distribution by country
Ireland installs about 14.29% of tor.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
28.57% |
|
| Lenovo |
28.57% |
|
| Acer |
14.29% |
|
| Hewlett-Packard |
14.29% |
|
| American Megatrends |
14.29% |
|
